CVE-2025-24121

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system.
References
Link Resource
https://support.apple.com/en-us/122068 Vendor Advisory Release Notes
https://support.apple.com/en-us/122069 Vendor Advisory Release Notes
https://support.apple.com/en-us/122070 Vendor Advisory Release Notes
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

24 Mar 2025, 15:03

Type Values Removed Values Added
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/122068 - () https://support.apple.com/en-us/122068 - Vendor Advisory, Release Notes
References () https://support.apple.com/en-us/122069 - () https://support.apple.com/en-us/122069 - Vendor Advisory, Release Notes
References () https://support.apple.com/en-us/122070 - () https://support.apple.com/en-us/122070 - Vendor Advisory, Release Notes
First Time Apple
Apple macos

28 Jan 2025, 15:15

Type Values Removed Values Added
CWE CWE-863
Summary
  • (es) Se solucionó un problema de lógica con comprobaciones mejoradas. Este problema se solucionó en macOS Ventura 13.7.3, macOS Sequoia 15.3 y macOS Sonoma 14.7.3. Es posible que una aplicación pueda modificar partes protegidas del archivo sistema.
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.3

27 Jan 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-27 22:15

Updated : 2025-03-24 15:03


NVD link : CVE-2025-24121

Mitre link : CVE-2025-24121

CVE.ORG link : CVE-2025-24121


JSON object : View

Products Affected

apple

  • macos
CWE
CWE-863

Incorrect Authorization